Trojan.Downloader.Java.OpenConnection

Trojan.Downloader.Java.OpenConnection
Does anyone knows what this is? Trojan remover1.6.8 found it on my pc.But the others (Kaspersky,TDS-3,Norton,TrendMicro's Housecall, Trojan Hunter3.85,...) didn't found or mentioned it.
I've submitted the "infected" file.

 

Hi ronny,

Do you have a full path and filename for where it was found?

Regards,

Pieter

 

I do.It is:
"C:\DocumentsandSettings\[username]\Application Data\Sun\Java\Deployment\cache\javapi\v.1.0\jar\loader.jar-2bae108e-17f70dba.zip"

Thank you Pieter!

 

Hi ronny,

Could you send that loader.jar to the address in my profile?
It could be a ByteVerify (or related) file.
It should be safe to delete it even if it is a false positive.
Also check this thread: http://www.wilderssecurity.com/showthread.php?t=13039 on how to empty your Sun Java cache.

Regards,

Pieter

 

I just got the following message from Nigel, the maker of Trojan Remover 6.1.8
"I can confirm that the report on the file you sent, MATRIX.CLASS, as
containing Trojan.Downloader.Java.OpenConnection, is a FALSE POSITIVE.
Please accept my apologies for this - you should take no action on the file.
The false positive will be corrected in the next database update."

So... no need to worry anymore. A compliment by the way for the quick response I got from Nigel

 

Heeeelp, i 'm getting mad...or at least confused.

Now Gavin from TDS-3 analysed the file and he said it is a REAl Positive! He is probably gonna add it to the database.
This is exciting!

 

I already sent him an e-mail (after all, HE found a real trojan,but removed it of his database after my first e-mail) ,but i didn't asked him to contact Gavin.
I thought that would be inappropriate because they are "competitors".

Sometimes i regret this ,because it seems to me they are both so dedicated and enthusiastic about their products, but i suppose not everyone is gonna buying TDS-3 AND Trojan Remover.

By the way ,i didn't receive a reply from Nigel yet.

 

I 've good news: Nigel has taken a second look to the file and can confirm it is malicious.He has re-added it to the database of Trojan Remover .
The bad guy came from a pornsite (of course!), shame on me . (And i even don't like porn at all!)
Thank you Nigel ,Thank you Gavin. Trojans stand little chance when they are around

P.S.:Trojan Remover 6.1.8 is now 6.1.9